apiVersion: "cilium.io/v2"
kind: CiliumClusterwideNetworkPolicy
metadata:
  name: "default-deny-host-ingress"
spec:
  nodeSelector: {}
  ingress:
  - fromEntities:
    - cluster
  - fromEntities:
    - world
    toPorts:
    - ports:
      - port: "22"
        protocol: TCP
      - port: "6443"
        protocol: TCP
